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Disposition of Claims 

A)M Claim(s) 1-18 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) S Claim(s) 1-18 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10)^ The drawing(s) filed on 26 October 2005 is/are: a)^ accepted or b)D objected to by the Examiner. 
Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

II) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12)D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 
a)D All b)Q Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2. D Certified copies of the priority documents have been received in Application No. . 

3. Q Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 



Attachment(s) 

1) Notice of References Cited (PTO-892) 

2) C] Notice of Draftsperson's Patent Drawing Review (PTO-948) 

3) □ Information Disclosure Statement(s) (PTO-1449 or PTO/SB/08) 

Paper No(s)/Mail Date . 



4) O Interview Summary (PTO-413) 

Paper No(s)/Mail Date. . 

5) □ Notice of Informal Patent Application (PTO-152) 

6) □ Other: . 



U.S. Patent and Trademark Office 
PTOL-326 (Rev. 7-05) 



Office Action Summary 



Part of Paper No./Mail Date 06122006 



Application/Control Number: 09/978,200 Page 2 

Art Unit: 2137 

DETAILED ACTION 
Continued Examination Under 37 CFR 1.114 
A request for continued examination under 37 CFR 1.114, including the fee set forth in 
37 CFR 1 .17(e), was filed in this application after final rejection. Since this application is 
eligible for continued examination under 37 CFR 1.114, and the fee set forth in 37 CFR 1 .17(e) 
has been timely paid, the finality of the previous Office action has been withdrawn pursuant to 
37 CFR 1.114. Applicant's submission filed on 4/7/2006 has been entered. 



Response to Amendment 
Applicant's arguments/ amendments with respect to amended claims 1, 7, & 10 and 
previously presented claims 2-6, 8-9, & 11-18 filed 3/9/2006 have been fully considered and 
therefore the claims are rejected under new grounds. 

Claim Rejections - 35 USC § 103 

I. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

II. Claims 1-18 are rejected under 35 U.S.C. 103(a) as being unpatentable over Yamagishi et 
al., U.S. Pub. No. 2002/0059519 and further in view of Linden et al., U.S. Patent No. 6,360,254. 
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As per claim 1 : 

Yamagishi et al. substantially teach a method comprising the steps of receiving a 
certificate request from a correspondent (par. 66); generating a string for use as a certificate 
locator (par. 72); utilizing said string to generate said address, said certificate being stored at said 
address (par. 72 and 205); making said string available for use by said correspondent in 
generating said address therefrom to retrieve a corresponding certificate from said database (par. 
206). Furthermore, Yamagashi et al. teach that in order to create a certificate, certain 
information is necessary, such as the certificate holder's name, a validity term, and other 
information as well (par. 16-17). 

Not explicitly disclosed is generating a string for use as a certificate locator from 
information contained in a certificate request. However, Linden et al teach generating a URL for 
access to private information, where the token used in the URL is derived from a user identifier 
and a time variable (col. 4, lines 61-65). Therefore, it would have been obvious to a person in 
the art at the time the invention was made to modify the method disclosed in Yamagishi et al. to 
generate the string for use as a certificate locator from information contained in the certificate 
request. This modification would have been obvious because a person having ordinary skill in 
the art, at the time the invention was made, would have been motivated to do so since Linden et 
al. suggest that the string ("token") should be generated from the user identifier and a time stamp 
in order to further protect against unauthorized identification of valid tokens in col. 4, lines 57- 
65. 
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As per claim 2: 

Yamagishi et al. and Linden et al. substantially teach the method according to claim 1 . 
Furthermore, Linden et al. teach the method wherein said string is mapped to an address in a 
directory (col. 4, line 65 - col. 5, line 2). 
As per claim 3: 

Yamagishi et al. and Linden et al. substantially teach the method according to claim 1. 
Furthermore, Linden et al. teach wherein said string is used as said address in said directory (col. 
6, lines 51-65). 
As per claim 4: 

Yamagishi et al. and Linden et al. substantially teach the method according to claim 1. 
Furthermore, Linden et al. teach the method wherein a mathematical function is applied to said 
information to obtain said string (col. 4, line 65 - col. 5, line 2). 
As per claim 5: 

Yamagishi et al. and Linden et al. substantially teach the method according to claim 4. 
Furthermore, Linden et al. teach wherein said mathematical function is a hash function (col. 4, 
line 57 - col. 5, line 2). 
As per claim 6: 

Yamagishi et al. and Linden et al. substantially teach the method according to claim 5. 
Furthermore, Linden et al. teach wherein said string is a portion of the output of said hash 
function (col. 4, line 57 - col. 5, line 2). 



As per claim 7: 
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Yamagishi et al. substantially teach the method comprising the steps of preparing a set of 
information for inclusion in a certificate request (par. 66), forwarding said string to said recipient 
to enable said recipient to generate said address therefrom, wherein said address indicates the 
location of said certificate in said database for subsequent retrieval by said recipient (par. 205- 
206). 

Not explicitly disclosed is generating from said set of information a string for use as a 
certificate locator in a database at said address. However, Linden et al. teach generating a URL 
for access to private information, where the token used in the URL is derived from a user 
identifier and a time variable (col. 4, lines 61-65). Therefore, it would have been obvious to a 
person in the art at the time the invention was made to modify the method disclosed in 
Yamagishi et al. to generate the string for use as a certificate locator from the set of information 
contained in the request for a certificate. This modification would have been obvious because a 
person having ordinary skill in the art, at the time the invention was made, would have been 
motivated to do so since Linden et al. suggest that the string ("token") should be generated from 
the user identifier and a time stamp in order to further protect against unauthorized identification 
of valid tokens in col. 4, lines 57-65. 
As per claim 8: 

Yamagishi et al. and Linden et al. substantially teach the method according to claim 7. 
Furthermore, Linden et al. teach wherein said information includes a time varying element (col. 
4, lines 60-65). 



As per claim 9: 
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Yamagishi et al. and Linden et al. substantially teach the method according to claim 7. 
Furthermore, Linden et al. teach wherein said mathematical function is a hash function (col. 4, 
line 57 - col. 5, line 2). 
As per claim 10: 

Yamagishi et al. substantially teach a method comprising the steps of collecting at one of 
said correspondents, information comprising a request for a certificate of said certificate 
authority (par. 66 and par. 204), forwarding said request to said certification authority (par. 66 
and par. 205), generating an address from said string at which said certificate is to be stored (par. 
205-206), storing said certificate issued from said request in a database at said address (par. 72 
and par. 205), and forwarding said string from said one correspondent to another of said 
correspondents to permit retrieval of said certificate from said database at said address (par. 205- 
206). 

Not explicitly disclosed is the method comprising computing a string from said 
information comprising said request for use as a certificate locator by said one correspondent and 
said certification authority. However, Linden et al. teach generating a URL for access to private 
information, where the token used in the URL is derived from a user identifier and a time 
variable (col. 4, lines 61-65). Therefore, it would have been obvious to a person in the art at the 
time the invention was made to modify the method disclosed in Yamagishi et al. to generate the 
string for use as a certificate locator from the set of information contained in the request for a 
certificate. This modification would have been obvious because a person having ordinary skill in 
the art, at the time the invention was made, would have been motivated to do so since Linden et 
al. suggest that the string ("token") should be generated from the user identifier and a time stamp 
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in order to further protect against unauthorized identification of valid tokens in col. 4, lines 57- 
65. 

As per claim 1 1 : 

Yamagishi et al. and Linden et al. substantially teach the method according to claim 10. 
Furthermore, Linden et al. teach wherein said information includes a time varying element (col. 
4, lines 60-65). 
As per claim 12: 

Yamagishi et al. and Linden et al. substantially teach the method according to claim 10. 
Furthermore, Linden et al. teach wherein communication between said one correspondent and 
said certification authority is performed over a secure channel (col. 8, lines 25-53). 
As per claim 13: 

Yamagishi et al. and Linden et al. substantially teach the method according to claim 10. 
Furthermore, Linden et al teach wherein said other correspondent obtains an address of said 
certificate from a known address of said database and said string (col. 3, lines 56-65). 
As per claim 14: 

Yamagishi et al. and Linden et al. substantially teach the method according to claim 10. 
Furthermore, Linden et al. teach the method wherein said other correspondent forwards said 
locator to said certification authority for construction of said address (col. 3, lines 46-65). 
As per claim 15: 

Yamagishi et al. and Linden et al. substantially teach the method according to claim 10. 
Furthermore, Linden et al. teach wherein said string is computed by application of a 
cryptographic hash function at least part of said request (col. 4, line 57 - col. 5, line 2). 
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As per claim 16: 

Yamagishi et al. and Linden et al. substantially teach the method according to claim 15. 
Furthermore, Linden et al. teach wherein said information includes a time varying element (col. 
4, lines 60-65). 
As per claim 17: 

Yamagishi et al. and Linden et al. substantially teach the method according to claim 15. 
Furthermore, Linden et al. teach wherein said string is a portion of the output of said hash 
function is used as the string (col. 4, line 57 - col. 5, line 2). 
As per claim 18: 

Yamagishi et al. and Linden et al. substantially teach the method according to claim 10. 
Furthermore, Linden et al. teach wherein said bit string is utilized as a pointer to an address in a 
directory (col. 4, line 65 - col. 5, line 2). 



^References Cited, Not Used 

The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. 

1. US Patent No. 6,959,308 

2. US Patent No. 6,438,690 

3. US Patent No. 6,795,920 

The above references have been cited because they are relevant due to the manner in which the 
invention has been claimed. 
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Conclusion 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Nadia Khoshnoodi whose telephone number is (571) 272-3825. 
The examiner can normally be reached on M-F: 8:00-4:30. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Emmanuel Moise can be reached on (571) 272-3865. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 




Nadia Khoshnoodi 
Examiner 
Art Unit 2137 
6/13/2006 
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